Quick Summary Misconfigured Elasticsearch Instance Publicly Accessible is a critical configuration issue where an Elasticsearch service is exposed to the public network without authentication or access restrictions. This may allow unauthorized users to query, modify, or delete indexed data, leading…
Quick Summary Exposed MongoDB Database Without Access Control is a critical misconfiguration where a MongoDB instance is accessible without authentication or proper network restrictions. This allows unauthorized users to connect to the database, read sensitive data, modify records, or delete…
Quick Summary Open Redis Instance Without Authentication is a critical misconfiguration where the Redis database service is exposed without requiring authentication. An unauthenticated Redis instance may allow attackers to read, modify, or delete data, execute system-level actions, or gain remote…
Quick Summary NetBIOS Over TCP/IP Enabled is a network service misconfiguration where the legacy NetBIOS protocol is enabled over TCP This configuration may allow attackers to enumerate system information, shared resources, and user accounts, increasing reconnaissance capabilities and exposure to…
Quick Summary SMBv1 Protocol Enabled is a network service misconfiguration where the legacy Server Message Block version 1 (SMBv1) protocol is supported on the target system. SMBv1 is outdated, insecure, and vulnerable to multiple high-severity exploits. Enabling SMBv1 significantly increases…
